Comment by notatoad

i mean, all webauthn is digital tokens. if you mean software-based, you're incorrect.

passkeys are hardware backed. it's the term for the browser or password manager exposing the secure enclave in your phone or computer as a webauthn credential store, just like a standalone security key.